[Mimedefang] ClamAV not detecting all viruses
Stewart James
stewart.james at vu.edu.au
Tue Jun 29 20:59:14 EDT 2004
OK here is the situation.
I have clamav-daemon which is run before trend micro's vscan.
The majority of viruses are found by clamav with no problems. One or two
slip past and are picked up by trend.
I altered my setup so the ones detected by trend get quarantined so I
could look further.
Change to the qdir and run clamdscan ENTIRE_MESSAGE and the virus is
found.
The viruses that are at issue are:
HTML_Netsky.P, when vscan decompresses the attached file is detects it
as WORM_NETSKY.P.
For clamav it is Worm.SomeFool.P
WORM_NETSKY.Q and Worm.SomeFool.Q also seem to be having this issue.
So doing it by hand the clamav finds these viruses, but through
mimedefang they are being missed.
I am at a loss where to go from here. clamav can detect them, but clamav
+mimedefang is missing them.
Any thoughts or tips?
Stewart
More information about the MIMEDefang
mailing list